Thanks Scott, my concern is text that is BASE64 encoded to "APPLE" being caught by the check.
Thanks again. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, January 16, 2003 11:36 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Is a BASE64 attachment considered body? >Would this command below catch APPLE if it was in a BASE64 attachment? Are >Attachments considered part of the body. > >BODY 15 CONTAINS APPLE Yes and no. :) A base64 attachment is part of the body of the E-mail (Declude JunkMail scans the entire body, attachments and all). So yes, it will be scanned. However, base64 encodes the text (which is why spammers use it), so "APPLE" may appear as "qexxrt", for example. We are planning to add basic base64 decoding to an upcoming release, though, so it can't hurt to add the "BODY 15 CONTAINS APPLE" line(s) now. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
